$ rpki-client -vvf rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/0B72CFAC049211EBB8144531C4F9AE02.roa File: 0B72CFAC049211EBB8144531C4F9AE02.roa (raw, json) Hash identifier: kE6e/2uyAi3HKTrQshUdCns+fLTS/L8pSxDJFAPtMig= Subject key identifier: 2E:FD:ED:84:71:59:C6:BF:B2:9E:9A:08:E9:31:8A:C8:D2:AB:88:08 Certificate issuer: /CN=A917A47E/serialNumber=02E97CAF6BB554871B7ABCE6E8D78320EB944691 Certificate serial: 2478 Authority key identifier: 02:E9:7C:AF:6B:B5:54:87:1B:7A:BC:E6:E8:D7:83:20:EB:94:46:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/0B72CFAC049211EBB8144531C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:27:55 +0000 ROA not before: Thu 31 Jul 2025 16:23:24 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 133466 IP address blocks: 45.112.36.0/22 maxlen: 24 103.4.124.0/22 maxlen: 24 2401:d00::/32 maxlen: 32 2401:d00::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.crl rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9336 (0x2478) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A47E, serialNumber=02E97CAF6BB554871B7ABCE6E8D78320EB944691 Validity Not Before: Jul 31 16:23:24 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a422bb-093f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3d:51:9a:10:0b:66:fb:f0:9d:46:10:42:a4: f1:8d:da:df:f0:96:4a:c5:d0:3f:4d:ff:55:86:33: 8c:1d:39:2c:15:0a:9a:52:c5:f0:c6:27:bd:f6:b3: 7c:c1:8e:40:5c:bb:49:ef:53:a0:7d:ad:90:cf:89: 80:6f:3e:44:1d:26:22:f6:c2:fe:c3:5e:58:ef:51: 80:9d:c6:f7:ec:fd:d6:32:91:28:c3:87:b8:b8:e5: 1d:be:44:52:27:71:e5:02:6f:f3:0f:82:c7:a3:b3: d6:48:5f:a0:dc:60:f7:d7:8e:1d:81:35:74:a8:c7: 60:ec:df:36:4a:73:64:f8:c5:da:06:85:58:a8:e9: 08:a4:4a:68:d1:b0:35:97:ef:ba:4c:84:4b:aa:5a: f1:5e:79:0d:f3:c8:ff:5c:6e:be:50:5a:32:0d:29: 02:de:c4:51:0d:51:7c:c2:75:cf:c0:36:f5:3b:10: fd:6e:fd:be:b6:d8:aa:d7:a8:eb:cf:77:1f:3b:a0: be:47:63:61:90:b4:b8:4f:20:e2:d1:24:3f:6c:e9: 3d:d0:12:47:37:cc:be:e9:19:66:8d:bc:2e:c6:5f: 06:40:2a:38:37:d4:f3:f4:10:07:e2:b8:82:bb:5e: 30:ce:a7:92:b1:0d:63:c6:dc:e1:8e:a6:7e:25:09: 05:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:FD:ED:84:71:59:C6:BF:B2:9E:9A:08:E9:31:8A:C8:D2:AB:88:08 X509v3 Authority Key Identifier: keyid:02:E9:7C:AF:6B:B5:54:87:1B:7A:BC:E6:E8:D7:83:20:EB:94:46:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/0B72CFAC049211EBB8144531C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.112.36.0/22 103.4.124.0/22 IPv6: 2401:d00::/32 Signature Algorithm: sha256WithRSAEncryption 23:1d:c2:4c:e0:05:f5:e4:91:df:8a:04:ba:9d:b5:c6:82:74: 35:1e:28:26:d5:bb:20:b9:f0:49:7d:ba:56:8f:18:5e:aa:69: c5:60:d4:2b:2e:78:81:95:cf:2c:69:8a:8c:c4:c1:0e:af:c4: 61:da:bd:e5:52:fc:bc:d9:e1:82:5a:e6:a0:9f:31:da:5e:b6: 28:f9:8f:54:21:93:07:77:a5:dc:0d:54:a0:f2:68:0b:79:e4: 39:da:2b:43:ef:c4:b9:6a:2c:21:4a:17:41:12:5f:71:2e:1c: dd:fb:e1:72:d8:93:e0:58:36:7f:0f:46:0b:7e:70:1e:1f:df: 81:6d:44:e2:82:ac:bf:84:93:0d:68:a6:7b:cf:53:62:30:09: 7d:3d:9b:55:a4:6a:b0:70:7c:20:32:b9:28:21:85:7a:bd:bc: e8:0f:b3:68:b1:29:1e:48:1c:a9:c9:f2:74:2a:c2:62:3c:2c: bb:e2:ea:52:53:d6:15:2d:0e:cb:d5:bb:2f:15:d4:22:6d:15: 2c:c6:fb:c1:f7:f9:78:51:f8:73:c4:08:76:6d:85:6e:b6:c3: 2d:26:f3:4a:1f:dc:fe:97:a1:3a:ef:5a:80:93:1e:3f:de:a0: 5c:e3:05:15:8e:46:5d:41:e9:ad:0d:96:61:90:6b:7b:77:e6: 53:36:a8:ca -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICJHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E0N0UxMTAvBgNVBAUTKDAyRTk3Q0FGNkJCNTU0ODcxQjdBQkNFNkU4RDc4MzIw RUI5NDQ2OTEwHhcNMjUwNzMxMTYyMzI0WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjJiYi0wOTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoz1RmhALZvvwnUYQQqTxjdrf8JZKxdA/Tf9VhjOMHTksFQqaUsXwxie99rN8 wY5AXLtJ71Ogfa2Qz4mAbz5EHSYi9sL+w15Y71GAncb37P3WMpEow4e4uOUdvkRS J3HlAm/zD4LHo7PWSF+g3GD3144dgTV0qMdg7N82SnNk+MXaBoVYqOkIpEpo0bA1 l++6TIRLqlrxXnkN88j/XG6+UFoyDSkC3sRRDVF8wnXPwDb1OxD9bv2+ttiq16jr z3cfO6C+R2NhkLS4TyDi0SQ/bOk90BJHN8y+6Rlmjbwuxl8GQCo4N9Tz9BAH4riC u14wzqeSsQ1jxtzhjqZ+JQkF6QIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFC797YRx Wca/sp6aCOkxisjSq4gIMB8GA1UdIwQYMBaAFALpfK9rtVSHG3q85ujXgyDrlEaR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTQ3RS8zRTZCRUM1NjY5 MDkxMUU1ODA0RjAwNzJDNEY5QUUwMi9BdWw4cjJ1MVZJY2JlcnptNk5lRElPdVVS cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F1bDhyMnUxVkljYmVyem02TmVESU91VVJwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0E0N0UvM0U2QkVDNTY2OTA5MTFFNTgwNEYwMDcyQzRGOUFFMDIvMEI3MkNGQUMw NDkyMTFFQkI4MTQ0NTMxQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCLXAkAwQCZwR8MA0EAgACMAcDBQAkAQ0AMA0GCSqGSIb3DQEBCwUA A4IBAQAjHcJM4AX15JHfigS6nbXGgnQ1Higm1bsgufBJfbpWjxheqmnFYNQrLniB lc8saYqMxMEOr8Rh2r3lUvy82eGCWuagnzHaXrYo+Y9UIZMHd6XcDVSg8mgLeeQ5 2itD78S5aiwhShdBEl9xLhzd++Fy2JPgWDZ/D0YLfnAeH9+BbUTigqy/hJMNaKZ7 z1NiMAl9PZtVpGqwcHwgMrkoIYV6vbzoD7NosSkeSBypyfJ0KsJiPCy74upSU9YV LQ7L1bsvFdQibRUsxvvB9/l4UfhzxAh2bYVutsMtJvNKH9z+l6E671qAkx4/3qBc 4wUVjkZdQemtDZZhkGt7d+ZTNqjK -----END CERTIFICATE-----Generated at Thu Mar 26 21:10:12 2026 by rpki-client